IAM Actions and Permissions for Amazon QuickSight users

Amazon QuickSight provides a number of AWS Identity and Access Management (IAM) actions
that you can use for creating or
removing an Amazon QuickSight account. All Amazon QuickSight actions are prefixed
with quicksight:,
such as quicksight:Subscribe. For information about using Amazon QuickSight actions in
an IAM policy, see Setting Your IAM Policy.

GetGroupMapping is used only in Amazon QuickSight Enterprise edition accounts.
It lets Amazon QuickSight identify and display the Microsoft AD directory groups
that are
mapped to roles in Amazon QuickSight.

"quicksight:SearchDirectoryGroups"

SearchDirectoryGroups is used only in Amazon QuickSight Enterprise edition
accounts. It lets Amazon QuickSight display your Microsoft AD directory groups
so that you
can choose which ones to map to roles in Amazon QuickSight.

"quicksight:SetGroupMapping"

SetGroupMapping is used only in Amazon QuickSight Enterprise edition accounts. It
lets Amazon QuickSight
map the Microsoft AD directory groups that you select to roles in Amazon QuickSight.